Method and Apparatus for Providing Continuous Access to Shared Tape Drives from Multiple Virtual Tape Servers Within a Data Storage System

ABSTRACT

A method for providing continuous access to shared tape drives from two virtual tape server (VTS) nodes is disclosed. A group of tape drives are connected to two VTS nodes via a set of switches. Both VTS nodes can concurrently process requests to mount physical tape cartridges to separate tape drives. The selection of a tape drive to fulfill a volume mount request on a physical volume begins by locking down any access to a tape drive table having a composite view of all the tape drives shared between the two VTS nodes. An available tape drive is then selected to mount the physical volume, and an entry in the tape drive table is updated to claim ownership of the tape drive. A reservation command is sent to the tape drive to lock down any access to the tape drive, and the lock to the tape drive table is released. Having claimed ownership to the tape drive, the VTS node can now perform the volume mount request.

BACKGROUND OF THE INVENTION

1. Technical Field

The present invention relates to data storage systems in general, andmore particularly, to data storage systems having shared tape drives.Still more particularly, the present invention relates to method andapparatus for providing continuous access to shared tape drives frommultiple virtual tape servers within a data storage system.

2. Description of Related Art

In a hierarchical data storage system, expensive and fast access storagedevices are commonly paired with arrays of cheaper and relatively sloweraccess data storage devices. Expensive and high-speed storage devicescan be, for example, direct access storage devices (DASDs), whilecheaper and slower storage devices can be, for example, tape drives.

A virtual tape storage system is a hierarchical data storage system. Avirtual tape storage system may include one or more virtual tape servers(VTSs) along with one or more tape storage and retrieval systems such asthe TotalStorage® 3494 Enterprise Tape Library manufactured by theInternational Business Machines Corporation of Armonk, N.Y.

During operation, a virtual tape storage system may communicate with oneor more host computers. However, a conventional VTS within a virtualtape storage system does not support operations in a multi-nodeenvironment. Thus, when there is a malfunction within a conventionalVTS, it is very difficult to locate the source of the problem. Theprocess of identifying and correcting a problem often involves customertechnical support team, support center, VTS developers, etc. VTS downtime, in many cases, is disruptive to customers. Consequently, it wouldbe desirable to provide a method for managing multiple controllers thatshare multiple tape drives within a data storage system such thatcontinuous access can be provided to the shared tape drives frommultiple controllers.

SUMMARY OF THE INVENTION

In accordance with a preferred embodiment of the present invention, twovirtual tape server (VTS) nodes are coupled using a computer network toprovide a highly available dual node virtual tape management system,both sharing a common physical tape library. Both VTS nodes are capableof actively and simultaneously process requests to mount physical tapecartridges to separate physical tape drives to access data. Thecombination of a database table and a SCSI reservation command isutilized to claim ownership of a tape drive. An ownership lock field inthe database table prevents the same tape drive to be selected for useuntil the ownership is released. The SCSI reservation command provides asecond layer of protection at the drive level. A highly availabledisaster recovery (HADR) module residing on each of the two nodescooperate on a computer network to delegate the database on one node tobe the primary database and the other node's database to be thesecondary database. The local HADR module redirects all databaserequests from the node associated with the secondary database to thenode associated with the primary database. The HADR modules keep boththe primary and secondary databases synchronized. Both VTS nodescommunicate with each other through the computer network to reportoperational status. When one of the VTS node having the primary databasefails during operation, the HADR module on the other VTS nodeautomatically switches the secondary database role to take on theprimary database role.

All features and advantages of the present invention will becomeapparent in the following detailed written description.

BRIEF DESCRIPTION OF THE DRAWINGS

The invention itself, as well as a preferred mode of use, furtherobjects, and advantages thereof, will best be understood by reference tothe following detailed description of an illustrative embodiment whenread in conjunction with the accompanying drawings, wherein:

FIG. 1 is a block diagram of a tape management system, in accordancewith a preferred embodiment of the present invention;

FIG. 2 is a block diagram of a dual-node data storage system, inaccordance with a preferred embodiment of the present invention;

FIGS. 3A and 3B are high-level logic flow diagrams of a method forproviding continuous access to shared tape drives and cartridges fromdifferent nodes within the dual-node data storage system of FIG. 2, inaccordance with a preferred embodiment of the present invention; and

FIGS. 4A and 4B are high-level logic flow diagrams of a method forproviding continuous access to shared tape drives and cartridges fromdifferent nodes within the dual-node data storage system of FIG. 2, inaccordance with an alternative embodiment of the present invention.

DETAILED DESCRIPTION OF A PREFERRED EMBODIMENT

With reference now to the drawings, and in particular to FIG. 1, thereis illustrated a block diagram of a tape management system, inaccordance with a preferred embodiment of the present invention. Asshown, a virtual storage system 100 includes a virtual tape server 101,a tape library 120, and a library manager 119. A host computer 102 islinked to virtual tape server 101 via a network connection, e.g.,TCP/IP, LAN, Ethernet, and the IBM Enterprise System Connection (ESCON)(not shown). Host computer 102 is a computer, such as a personalcomputer, workstation or mainframe, that is linked to virtual tapeserver 101 via an ESCON channel. Virtual tape server 101 is a computer,such as a personal computer, workstation or mainframe, that isassociated with a direct access storage device (DASD) cache 107. DASDcache 107 preferably includes one or more logical volumes. DASD cache107 includes multiple hard disks that are spaced into redundant array ofinexpensive disk (RAID) arrays.

Tape library 120 includes multiple tape drives 121A-121N, such asInternational Business Machine (IBM) TS1100 or Jaguar 3592 tape drivesor any other tape drive known in the art. Generally, a removable storagevolume, e.g., a tape cartridge 123A-123N, is loaded into each of thetape drives. Tape drives 121A-121N are serviced by an accessor (e.g., arobot) 122 that transfers selected tape cartridges 121A-121N among tapedrives 121A-121N and their corresponding positions within a tapecartridge repository.

Tape library 120 includes storage management software utilized tomonitor the active space on the tape cartridges and schedulereclamations of tape cartridges when the system is less active. Tapelibrary 120 is a tape library system such as the IBM VirtualizationEngine TS 7740 and IBM Magstar 3494 Tape Library. Library manager 119 isutilized in virtual storage system 100 to install, maintain, configure,and operate tape library 120. Within automated library 120, accessor 122may be controlled utilizing a library manager 119 based upon inputsreceived from removable media manager 118.

DASD cache 107, which includes a tape volume cache, provides a cache fordata stored in tape library 120. DASD cache 107 maintains logicalvolumes as logical volume files that are concatenated into physicalvolume files in the tape cartridges loaded in the tape drives locatedwithin tape library 120. When a logical volume file in DASD cache 107moves to a tape drive in a tape library 120, the logical volume file iswritten to a physical volume file on a tape cartridge in the actual tapedrive. When a physical volume file is recalled for a tape drive andmoved to DASD cache 107, the physical volume file then becomes a logicalvolume file in DASD cache 107. In this way, DASD cache 107 provides awindow to host computer 102 of all the physical volume files in tapelibrary 120.

Virtual tape data storage system includes a virtualization node 103having multiple virtual tape daemons, generally designated as tapedaemons 105A-105N, that represent and emulate virtual tape devices tohost computer 102. The operating system of host system 102, in turn,manages the presentation of the virtual tape devices to the systemsusers (not shown). Host computer 102 views the virtual tape devices asactual drives and when host computer 102 attempts to access a logicalvolume in a selected virtual tape device, the respective virtual tapedaemon associated with the virtual tape device requested by hostcomputer 102 will handle the host access request.

Host-to-DASD cache data transfer in the illustrated virtual tape datastorage subsystem may be controlled by VTS code via a cluster managerprocess 111 within a hierarchical storage node (HSN). For example, acluster manager 111 within virtual storage system 100 intercepts andprocesses the access request from virtual tape daemons 105A-105N.Cluster manager 111 then carries out host system 102's request to accessthe logical volume file on DASD cache 107. Host-to-DASD cache datatransfer is directly controlled by a file system manager (FSM) 106A-106Nthat handles DASD read and write commands.

Similarly, an interface between DASD cache 107 and tape storage drive121 may be controlled by removable media manager (RMM) 118. For example,when cluster manager 109 attempts to mount a logical volume file that isnot located in DASD cache 107, cluster manager 109 communicates theaccess request to the recall manager 114, which in turn forwards therequest to data mover 111. If the tape in the access request is alreadymounted in a tape drive in tape library 120, RMM 118 will immediatelyinform data mover 111 to access the physical volume for the requestedlogical volume file from the mounted tape. However, if the requestedfile on a tape is not presently mounted in a tape drive, RMM 118 willinitiate a request to library manager 119 to mount the tape containingthe physical volume corresponding to the requested logical volume file.

Data mover 111 migrates entire logical volume files from DASD cache 107to tape library 120. When the available space in DASD cache 107 reachesa predetermined level or after a predetermined time period, cachemanager 113 will direct data mover 111 to migrate logical volume filesfrom DASD cache 107 to tape library 120 for archival therein.

Further, RMM 118 may diagnose errors or determine the origin of errorsthat are detected (e.g., tape drive 121 or tape cartridge 123). RMMrecords the errors into an error event table in the database 116. Basedon the history of errors in the database 116, RMM 118 may takeappropriate action to create an error recovery procedure (ERP). If anERP requires operator assistance, an operator intervention may be postedto management interface 117. Management interface 117 providesinformation about the system and allows user control and configurationof the system.

As explained above, host 102 access data that resides in DASD cache 107.When a service has to be done to virtual tape storage system 100 (e.g.,installing new microcode, upgrading the DASD cache), virtual tape system100 is taken offline to host computer 102. Host computer 102 no longerhas access to data in DASD cache 107 nor can data be obtained fromphysical cartridges 123A-123N. There arises the need to have virtualtape storage system 100 that can provide continuous access to customerdata while service is in progress. The customer data may reside onphysical tape cartridges 123A-123N that must be mountable to physicaltape drives 121A-121N. A method could be developed to share the physicallibrary 120 simultaneously from two VTS nodes such that both can processhost request simultaneously or solely if one VTS node is being serviced.

With reference now to FIG. 2, there is depicted a block diagram of adual-node virtual storage system, in accordance with a preferredembodiment of the present invention. As shown, a dual-node virtualstorage system 218 includes a virtual storage system node 200A and avirtual storage system node 200B interconnected to each other via acomputer network 201. Virtual storage system node 200A includes a DASDcache 204A, a virtualization node 205A and a hierarchical storage node206A. Hierarchical storage node 206A includes a cluster manager 208A, adomain manager 217A, a primary database 20A, a RMM 207A, and a highdisaster availability recovery (HADR) module 203A. Similarly, virtualstorage system node 200B includes a DASD cache 204B, a virtualizationnode 205B, and a hierarchical storage node 206B. Hierarchical storagenode 206B includes a cluster manager 208B, a domain manager 217B, aprimary database 20B, a RMM 207B, and a HADR module 203B. Not shown inhierarchical storage node 206A and hierarchical storage node 206B aremodules from FIG. 1 such as remote file access server 110, data mover111, physical tape manager 112, cache manager 113, recall manager 114,and management interface 117.

Both virtual storage node 200A and virtual storage node 200B are capableof communicating with each other through computer network 201. Bothvirtual storage node 200A and virtual storage node 200B share the samelibrary manager 210 and can communicate with library manager 210 viacomputer network 209. Both virtual storage node 200A and virtual storagenode 200B share the same physical library 211 including physical tapedrives 212A-212N, physical cartridges 214A-214N, and robotic accessor213. Both virtual storage node 200A and virtual storage node 200Bcommunicate with physical tape drives 212A-212N through network 215(e.g., fiber channel switches).

RMMs 207A and 207B are responsible for choosing a drive for physicalcartridge mount requests (a process known as drive selection) andmounting cartridge 214 to a selected drive 212 through library manager210. For example, RMM 207A receives a mount request for a particularcartridge. RMM 207A communicates with HADR module 203A to select a drive(the chosen drive is in the form of a drive record). HADR module 203Aprocesses the drive selection request using primary database 202A.Similarly, RMM 207B receives a mount request for a different cartridge.RMM 207B communicates with HADR module 203B to select a drive. HADRmodule 203B processes the drive selection request by redirecting therequest to HADR module 203A via computer network 201. HADR module 203Aintercepts the drive selection request from HADR module 203B, selects adrive using primary database 202A, passes the response including theselected drive record back to HADR module 203B. HADR module 203B returnsthe selected drive record to RMM 207B.

Besides serializing database access (in the above example) HADR modules203A and 203B are responsible for synchronizing the database informationbetween primary database 202A and secondary database 202B. HADR modules203A and 203B also coordinate with each other to decide if database 202Aor database 202B should be primary database and the other to be thesecondary database. In other words, the role of primary database 202A isnot fixed. For example, if virtual storage system node 200A is broughtdown for service and both primary database 202A and secondary database202B are in sync, HADR module 202B will switch the role of database 202Bto be the primary database. When virtual storage system node 200A isbrought online at a later time, HADR modules 202A and 202B willcommunicate to synchronize databases 202A and 202B, and may set the roleof database 202A to the secondary database.

One of RMMs 207A and 207B is allowed to take ownership of a physicaldrive from another one of RMMs 207A and 207B if such RMM had failed dueto an unexpected error condition. For example, RMM 207A in virtualstorage system node 200A claimed ownership of physical drive 212A and isrecalling data from the cartridge 214A to DASD 204A. Virtual storagesystem 200A encounters a fatal error that brought the system offline tohost computer 216 without going through the normal process of releasingall resources held by virtual storage system 200A. Domain manager 217Bnormally receives “heart beats” (i.e., messages that indicate the healthof a system) from domain manager 217A on a regular time interval, butsince virtual storage system 200A went offline, domain manager 217Bstops receiving heart beats from and fails to send heart beats to domainmanager 217A. After a specified period of time of consecutive errors,domain manager 217B declares domain manager 217A to be offline. RMM 207Bcommunicates with domain manager 217B to obtain the operational state ofvirtual storage system 200A and discovers virtual storage system 200A isoffline. RMM 207B communicates with HADR module 203B to query thedatabase 202B (now the primary database) to obtain a list of physicaldrives still owned by RMM 207A. RMM 207B recovers the physical drive212A that was owned by RMM 207A, including freeing the ownership lock inthe drive record. RMM 207B may now use the drive 212A to fulfill aphysical mount request.

With reference now to FIGS. 3A and 3B, there are depicted high-levellogic flow diagrams of a method for providing continuous access toshared physical drives and cartridges within a dual-node virtual storagesystem, in accordance with a preferred embodiment of the invention.Starting at block 300, a VTS 200A having the primary database 202Adetermines that the physical cartridge 214 is required to be mounted toa physical drive 212 to access data. RMM 207A receives the cartridgemount request, as shown in block 301. RMM 207A communicates with HADRmodule 203A to read the cartridge information from the primary database202A including the cartridge type, as depicted in block 302. Adetermination is made to find one or more physical drive types 212A-212Nthat can support the cartridge type, as shown in block 303. RMM 207Auses the information gathered from blocks 302 and 303 to build adatabase query that will select a drive record according to therequirements, as depicted in block 304.

Next, RMM 207A passes the database query to local HADR module 203A, asshown in block 305. Local HADR module 203A processes the database queryby first locking down the drive table (which contains all drive records)and then selecting a drive record from database 202A that matches thecriteria specified in the database query, as depicted in block 306.Locking down the drive table prevents access to read or update any driverecords in the drive table while the drive selection process is inprogress. Once a drive record is selected, remote HADR module 203A locksdown the selected drive record (i.e., a read with hold), as shown inblock 307. A record locked by the owner can only be updated by theowner.

Next, local HADR module 203A unlocks the drive table from database 202A,as depicted in block 308, which allows other potential database users tocontinue accessing the drive table. Local HADR module 203A returns thelocked drive record to RMM 207A, as shown in block 309. RMM 207A updatesthe ownership field in the locked drive record to claim ownership of thedrive, as depicted in block 310. RMM 207A forwards the updated driverecord to HADR module 203A, as shown in block 311. Local HADR module203A sends a request to remote HADR module 203B to store the updateddrive record to database 202B. After updating the remote standbydatabase 202B, local HADR module 203A stores the updated record in thedrive table of database 202A and unlocks the drive record, as depictedin block 312. Local HADR module 203A returns control back to RMM 207A,as shown in block 313. RMM 207A now claims ownership of the usage to thedrive by sending a SCSI reservation command, as depicted in block 314.At the drive level, a SCSI reservation prevents the second VTS node 200Bfrom unexpectedly trying to use the drive while tape input and outputoperations are in progress by VTS node 200A. Once ownership has beenestablished in the database drive record 202A and physical drive level212, RMM 207A issues the mount to the library manager 210 for cartridge214 to drive 212, as shown in block 315.

With reference now to FIGS. 4A and 4B, there are depicted high-levellogic flow diagrams of a method for providing continuous access toshared physical drives and cartridges within a dual-node virtual storagesystem, in accordance with an alternative embodiment of the presentinvention. Starting in block 400, a VTS 200B having secondary database202B determines that physical cartridge 214 is required to be mounted toa physical drive 212 to access data. RMM 207B receives the cartridgemount request, as shown in block 401. RMM 207B communicates with HADRmodule 203B (which in turn communicates with HADR module 203A) to readthe cartridge information from primary database 202A including thecartridge type, as depicted in block 402. A determination is made tofind the one or more physical drive types 212A-212N that can support thecartridge type, as shown in block 403. RMM 207B uses the informationgathered from blocks 402 and 403 to build a database query that willselect a drive record according to the requirements, as depicted inblock 404.

RMM 207B passes the database query to local HADR module 203B, as shownin block 405. Local HADR module 203B forwards the database query toremote HADR module 203A, as depicted in step 406. Remote HADR module203A processes the database query by first locking down the drive table(contains all drive records) and then selecting a drive record fromdatabase 202A that matches the criteria specified in the database query,as shown in block 407. Once a drive record has been selected, remoteHADR module 203A locks down the selected drive record (i.e., a read withhold), as depicted in block 408.

Next, remote HADR module 203A unlocks the drive table from database202A, as shown in block 409, which allows other potential database usersto continue accessing the drive table. Remote HADR module 203A returnsthe locked drive record to local HADR module 203B, as depicted in block410. Local HADR module 203B returns the locked drive record to RMM 207B,as shown in block 411. RMM 207B updates the ownership field in thelocked drive record to claim ownership of the drive, as depicted inblock 412. RMM 207B forwards the updated drive record to HADR module203B, as shown in block 413. Local HADR module 203B sends a request tothe remote HADR module 203A to store the updated drive record, asdepicted in block 414. Remote HADR module 203A sends a request back toHADR module 203B to update standby database 202B. Local HADR module 203Breturns confirmation to remote HADR module 203A of the updatecompletion. Remote HADR module 203A now updates database 202A, as shownin block 415, which also unlocks the drive record. Remote HADR module203A returns control back to local HADR module 203B, as depicted inblock 416. Local HADR module 203B returns control back to RMM 207B, asshown in block 417. RMM 207B now claims ownership of the usage to thedrive by sending a SCSI reservation command, as depicted in block 418.Once ownership has been established in primary database drive record202A (and 202B) and physical drive level 212, RMM 207B issues the mountto library manager 210 for cartridge 214 to drive 212, as shown in block419.

As has been described, the present invention provides an improved methodand apparatus for providing continuous access to shared physical drivesand cartridges from multiple VTS nodes within an automated tape library.

While an illustrative embodiment of the present invention has beendescribed in the context of a fully functional computer system, thoseskilled in the art will appreciate that the software aspects of anillustrative embodiment of the present invention are capable of beingdistributed as a program product in a variety of forms, and that anillustrative embodiment of the present invention applies equallyregardless of the particular type of media used to actually carry outthe distribution. Examples of the types of media include recordable typemedia such as thumb drives, floppy disks, hard drives, CD ROMs, DVDs,and transmission type media such as digital and analog communicationlinks.

While the invention has been particularly shown and described withreference to a preferred embodiment, it will be understood by thoseskilled in the art that various changes in form and detail may be madetherein without departing from the spirit and scope of the invention.

1. A method for providing continuous access to shared tape drives frommultiple virtual tape server (VTS) nodes, said method comprising:connecting a first VTS node and a second VTS node to a plurality of tapedrives via a plurality of switches, wherein said first VTS node includesan active database and said second VTS node includes a standby database;redirecting all requests received by said standby database to saidactive database; in response to a volume mount request on a physicalvolume, placing a lock on a tape drive table by one of said two VTSnodes handling said volume mount request to preventing any access tosaid tape drive table from one of said two VTS nodes not handling saidvolume mount request; selecting an available physical tape drive tomount said physical volume and marking an entry within said tape drivetable to claim ownership of said physical tape drive by said VTS nodehandling said volume mount request; sending drive reservation request tosaid physical tape drive to prevent any access to said physical tapedrive, and releasing said lock on said tape drive table by said VTS nodehandling said volume mount request; and performing said volume mountrequest by said VTS node handling said volume mount request.
 2. Themethod of claim 1, wherein said method further includes returning anerror status in a determination that said physical volume is notmountable.
 3. The method of claim 1, wherein said method furtherincludes returning an error status in a determination that no physicaltape drive is available to mount said physical volume.
 4. The method ofclaim 1, wherein said first and second VTS nodes communicate with eachother via a computer network.
 5. The method of claim 1, wherein saidtape drive table includes a composite view of all physical tape drivesshared between said two VTS nodes.
 6. The method of claim 1, whereinsaid two VTS nodes communicate each other's system health via periodic“heart beats” such that when one of said two VTS node fails and anotherone of said two VTS nodes takes ownership of devices from said failedVTS node.
 7. A computer storage medium having a computer program productfor providing continuous access to shared tape drives from multiplevirtual tape server (VTS) nodes, said computer storage mediumcomprising: computer program code for connecting a first VTS node and asecond VTS node to a plurality of tape drives via a plurality ofswitches, wherein said first VTS node includes an active database andsaid second VTS node includes a standby database; computer program codefor redirecting all requests received by said standby database to saidactive database; computer program code for, in response to a volumemount request on a physical volume, placing a lock on a tape drive tableby one of said two VTS nodes handling said volume mount request topreventing any access to said tape drive table from one of said two VTSnodes not handling said volume mount request; computer program code forselecting an available physical tape drive to mount said physical volumeand marking an entry within said tape drive table to claim ownership ofsaid physical tape drive by said VTS node handling said volume mountrequest; computer program code for sending drive reservation request tosaid physical tape drive to prevent any access to said physical tapedrive, and releasing said lock on said tape drive table by said VTS nodehandling said volume mount request; and computer program code forperforming said volume mount request by said VTS node handling saidvolume mount request.
 8. The computer storage medium of claim 7, whereinsaid computer storage medium further includes computer program code forreturning an error status in a determination that said physical volumeis not mountable.
 9. The computer storage medium of claim 7, whereinsaid computer storage medium further includes computer program code forreturning an error status in a determination that no physical tape driveis available to mount said physical volume.
 10. The computer storagemedium of claim 7, wherein said first and second VTS nodes communicatewith each other via a computer network.
 11. The computer storage mediumof claim 7, wherein said tape drive table includes a composite view ofall physical tape drives shared between said two VTS nodes.
 12. Thecomputer storage medium of claim 7, wherein said computer storage mediumfurther includes computer program code for allowing said two VTS nodesto communicate each other's system health via periodic “heart beats”such that when one of said two VTS node fails and another one of saidtwo VTS nodes takes ownership of devices from said failed VTS node.